This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json) Hash identifier: G1jFseRfONE4xpB2nvWhU8zAPP7ckvKck74uQ0AgGnM= Subject key identifier: 75:78:ED:3A:12:70:3A:E1:0C:CB:3A:EA:27:59:40:3C:71:EA:30:F1 Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979 Certificate serial: 019B3EDA4828C13BE3F2D748AA63991C38A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:51 +0000 Manifest this update: Sun 21 Dec 2025 03:00:51 +0000 Manifest next update: Mon 22 Dec 2025 03:00:51 +0000 Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=) 2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: RgI5COtbD2WoBOGGPMYTY3Ngv9p2571GU8T3nmJZMoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:48:28:c1:3b:e3:f2:d7:48:aa:63:99:1c:38:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979 Validity Not Before: Dec 21 03:00:51 2025 GMT Not After : Dec 22 03:00:51 2025 GMT Subject: CN=7578ed3a12703ae10ccb3aea2759403c71ea30f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cc:0d:fa:93:d9:eb:c8:06:27:19:f9:2b:d1: c4:7c:00:7e:29:1e:85:cf:be:fc:34:07:5d:cb:35: 07:4a:13:f7:88:e4:46:83:89:0c:60:9b:b9:a0:f4: 4f:f8:6f:80:37:01:07:3e:dc:08:97:c4:cd:8a:37: 01:5c:41:97:6c:d5:12:9a:ad:ac:6d:6b:f6:de:5d: bd:75:af:b7:46:a7:bd:ae:3b:1a:42:aa:ae:d2:ca: 56:63:c5:ee:bf:9c:2d:8a:e3:67:5a:c7:a8:32:48: bf:ed:d0:16:fe:0e:81:15:e7:13:02:ec:a3:7b:40: 7d:a4:7b:80:58:47:34:17:8b:2a:09:9e:fe:34:c3: 07:e5:64:d9:d1:19:1f:9a:fe:43:7f:df:4c:76:ac: be:0e:87:c2:ec:98:67:b2:8f:1a:d0:71:55:f2:d2: 2d:61:d9:93:bf:a7:c9:8e:16:58:14:48:8d:14:0c: 42:9e:aa:e2:99:c0:09:5f:bc:49:ff:33:ab:b1:4a: 49:8e:23:03:3b:20:d2:4e:cb:fd:bc:41:5d:b1:dc: af:c0:41:f4:a2:fe:0e:b7:7f:b1:3f:af:25:e1:98: 88:b7:0c:36:a5:b1:b4:40:ec:1a:4d:70:9c:2c:23: 1b:3c:89:c2:67:35:61:39:f0:4d:60:12:5c:f6:c4: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:ED:3A:12:70:3A:E1:0C:CB:3A:EA:27:59:40:3C:71:EA:30:F1 X509v3 Authority Key Identifier: keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:44:7e:00:40:e3:b4:c8:20:bf:7f:0f:30:4c:24:d4:17:da: c4:ce:79:30:c3:54:e1:3e:ae:ec:e6:c5:94:b1:ee:ea:38:36: 57:4e:51:48:1f:2e:c9:40:22:0a:60:c1:50:f2:1f:02:2b:7d: ec:b3:60:e8:a8:07:2a:99:35:dc:45:28:a1:bb:35:1e:87:8d: 01:69:f7:a2:dd:72:54:58:c3:76:39:1c:91:c8:c5:f0:86:3b: 8f:8f:8e:55:cf:48:e4:19:21:94:7b:8f:38:90:d1:1e:5d:65: d5:5e:0f:a7:c3:4f:9c:57:6d:6b:f5:84:0c:ad:87:fb:07:1b: 32:dd:b8:fe:21:00:7d:b3:47:20:97:8e:67:33:48:05:59:36: 09:6f:b9:32:51:3c:bf:ef:54:d9:fc:c0:10:91:66:67:16:9a: 71:91:b0:e2:da:4c:24:4f:b2:3a:a9:14:fd:7f:56:64:dd:43: 3b:6c:f6:3f:87:d7:46:29:02:f5:75:e3:1d:50:97:8a:20:40: 2e:32:cb:bd:6e:9e:dd:d4:74:e0:e2:e0:c9:46:81:e1:d8:22: 11:09:9a:8c:23:4e:08:91:b3:87:7c:ed:30:34:45:3e:bd:b5: b5:9e:27:89:e0:da:7d:e2:5a:65:6c:fd:55:13:44:a1:03:6e: eb:65:ab:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2kgowTvj8tdIqmOZHDilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl NzA5NzkwHhcNMjUxMjIxMDMwMDUxWhcNMjUxMjIyMDMwMDUxWjAzMTEwLwYDVQQD Eyg3NTc4ZWQzYTEyNzAzYWUxMGNjYjNhZWEyNzU5NDAzYzcxZWEzMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6swN+pPZ68gGJxn5K9HEfAB+KR6F z778NAddyzUHShP3iORGg4kMYJu5oPRP+G+ANwEHPtwIl8TNijcBXEGXbNUSmq2s bWv23l29da+3Rqe9rjsaQqqu0spWY8Xuv5wtiuNnWseoMki/7dAW/g6BFecTAuyj e0B9pHuAWEc0F4sqCZ7+NMMH5WTZ0Rkfmv5Df99Mdqy+DofC7Jhnso8a0HFV8tIt YdmTv6fJjhZYFEiNFAxCnqrimcAJX7xJ/zOrsUpJjiMDOyDSTsv9vEFdsdyvwEH0 ov4Ot3+xP68l4ZiItww2pbG0QOwaTXCcLCMbPInCZzVhOfBNYBJc9sRn1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV47ToScDrhDMs66idZQDxx6jDxMB8GA1UdIwQY MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZER+AEDj tMggv38PMEwk1BfaxM55MMNU4T6u7ObFlLHu6jg2V05RSB8uyUAiCmDBUPIfAit9 7LNg6KgHKpk13EUoobs1HoeNAWn3ot1yVFjDdjkckcjF8IY7j4+OVc9I5BkhlHuP OJDRHl1l1V4Pp8NPnFdta/WEDK2H+wcbMt24/iEAfbNHIJeOZzNIBVk2CW+5MlE8 v+9U2fzAEJFmZxaacZGw4tpMJE+yOqkU/X9WZN1DO2z2P4fXRikC9XXjHVCXiiBA LjLLvW6e3dR04OLgyUaB4dgiEQmajCNOCJGzh3ztMDRFPr21tZ4nieDafeJaZWz9 VRNEoQNu62Wr/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:23 2025 by rpki-client